[shurshot]

I am getting a BSOD on an HP laptop.  Dump files are attached.  Please help!

Attached Files

•  minidump1.zip   29.54KB   224 downloads

[Advertisements]

The dump points to ALUpdate.exe as the probably cause. I think this belongs to Sophos anti-virus or anti-rootkit. Try uninstalling Sophos and if it's your anti-virus replace it with Microsoft Security Essentials or Avast.

[Ztruker]

The dump points to ALUpdate.exe as the probably cause. I think this belongs to Sophos anti-virus or anti-rootkit. Try uninstalling Sophos and if it's your anti-virus replace it with Microsoft Security Essentials or Avast.

[shurshot]

Thanks for your response!  I just uninstalled Sophos and replaced it with Symantec.  Now only time will tell.  Thanks again!

[shurshot]

Got BSOD again today.  Minidump files are attached.  Please let me know what to try next.

Attached Files

•  minidump2.zip   60.84KB   172 downloads

[Ztruker]

Both dumps point to netio.sys which is a MS system file and unlikely to be the cause. Probably a device driver but I can't say which one, sorry.

Maybe try getting a kernel dump next time which should have more info than the mini dumps.

 

See this post for info on how to set it up, collect and post it: http://www.geekstogo...g/#entry2436754

[shurshot]

Good news and bad news...  Good news:  the computer was already set to do a kernal dump.  Bad news:  the zipped file of memory.dmp is 213MB and will not upload.  Is there another option?

 

Additional information: the laptop is my daughter's and it only blue screens when she accesses the network at school.  It has never blue screened on our home network.  Could this point to a network adapter driver problem?

[Jared44]

Upload the dump file to a file sharing site like Onedrive.

 

netio is the Network I/O subsystem and tcpip is a set of communication protocols which have been implemented as a logical system driver, your network driver is probably having problems.

 

Looking at your latest minidump, I see Symantec conflicting.

fffff880`0afbbc38 fffff800`02e91169 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`0afbbc40 fffff800`02e8fde0 : 00000000`00000000 00000000`00000400 00000000`00000000 fffffa80`0dc4c320 : nt!KiBugCheckDispatch+0x69
fffff880`0afbbd80 fffff880`01e9453b : fffffa80`0dc4c320 00000000`00000000 00000000`206c644d 00000002`00008007 : nt!KiPageFault+0x260
fffff880`0afbbf10 fffff880`01802872 : 00000000`00000000 00000000`00000001 00000000`00000001 00000000`00000006 : tcpip! ?? ::FNODOBFM::`string'+0x57b4
fffff880`0afbbf60 fffff880`01e5a212 : fffff880`0629657c fffffa80`0bcb2000 fffff880`0afbc07c fffff880`0afbc080 : NETIO!NetioDereferenceNetBufferListChain+0x132
fffff880`0afbc030 fffff880`01e57d2f : 00000000`c08abbc6 fffff880`01f6d9a0 fffff880`01f6d9a0 00000000`00000000 : tcpip!IppReceiveHeaderBatch+0x3c3
fffff880`0afbc110 fffff880`01e57302 : fffffa80`0d2d37e0 00000000`00000000 fffffa80`0d2c1000 fffffa80`00000001 : tcpip!IpFlcReceivePackets+0x64f
fffff880`0afbc310 fffff880`01ec9bca : fffff880`0afbc450 fffff880`0afbc400 fffffa80`0d2c1010 fffff880`0190c2a0 : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2b2
fffff880`0afbc3f0 fffff800`02e9d878 : fffffa80`0dc57560 fffffa80`07fc0800 fffffa80`0dcdab50 00000000`00000001 : tcpip! ?? ::FNODOBFM::`string'+0x49ca2
fffff880`0afbc440 fffff880`01e56e22 : fffff880`01e56650 00005dfd`8dcad344 ffff0000`0f05af00 00000000`00000001 : nt!KeExpandKernelStackAndCalloutEx+0xd8
fffff880`0afbc520 fffff880`019b30eb : fffffa80`0d2d3010 00000000`00000000 fffffa80`0b82b1a0 fffffa80`0b82b1a0 : tcpip!FlReceiveNetBufferListChain+0xb2
fffff880`0afbc590 fffff880`0197cad6 : fffffa80`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ndis!ndisMIndicateNetBufferListsToOpen+0xdb
fffff880`0afbc600 fffff880`018ff5d4 : fffffa80`0b82b1a0 00000000`00000002 00000000`00000001 00000000`00000000 : ndis!ndisMDispatchReceiveNetBufferLists+0x1d6
fffff880`0afbca80 fffff880`018ff549 : 00000000`00000000 fffffa80`0dcdab50 fffffa80`0d387f20 00000000`00000000 : ndis!ndisMTopReceiveNetBufferLists+0x24
fffff880`0afbcac0 fffff880`018ff4e0 : fffffa80`00000017 fffff880`018f74d4 00000000`00000017 00000000`00000216 : ndis!ndisFilterIndicateReceiveNetBufferLists+0x29
fffff880`0afbcb00 fffff880`04a0b470 : fffffa80`0ab91870 00000000`00060600 00000000`00000000 fffffa80`0a854bf0 : ndis!NdisFIndicateReceiveNetBufferLists+0x50
fffff880`0afbcb40 fffffa80`0ab91870 : 00000000`00060600 00000000`00000000 fffffa80`0a854bf0 fffffa80`00000000 : Teefer+0xb470
fffff880`0afbcb48 00000000`00060600 : 00000000`00000000 fffffa80`0a854bf0 fffffa80`00000000 fffff880`04a111c0 : 0xfffffa80`0ab91870
fffff880`0afbcb50 00000000`00000000 : fffffa80`0a854bf0 fffffa80`00000000 fffff880`04a111c0 fffffa80`0aa034a8 : 0x60600

netr28x.sys  Fri Apr 12 12:20:28 2013

Your Ralink RT2860 series Wireless LAN driver is outdated, I suggest you update it.

Rt64win7.sys Tue Aug 23 14:55:41 2011

Your Realtek ethernet driver is out of date as well, I suggest you update that.

[Ztruker]

How do you find the device driver list you reference above?

Also, where do you see Symantec?

 

I found lm tn for windbg which shows device driver info.

[Jared44]

Yes I used the lmnt command.

 

teefer is the Symantec firewall which is conflicting with the network driver.

[Ztruker]

Thanks for the info. A quick search shows teefer is a definite cause of some BSODs.

[shurshot]

I will try updating the drivers you mentioned and see if that helps.  Thanks!